84 matches found
openSUSE Security Update : moodle (openSUSE-SU-2010:0365-1)
Moodle was prone to several Cross-Site Scripting XSS vulnerabilities CVE-2010-2228, CVE-2010-2229, CVE-2010-2230, CVE-2010-2231. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update moodle-2691. Th...
CVE-2010-2230
CVE-2010-2230 (Moodle) affects the Moodle web app’s KSES HTML text cleaning library (lib/weblib.php). The root cause is the KSES filter failing to properly handle vbscript URIs, allowing remote authenticated users to inject arbitrary HTML/script via HTML input (XSS). Affected are Moodle 1.8.13- a...
Fedora Update for moodle FEDORA-2010-10291
Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2010-10291 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...
Fedora Update for moodle FEDORA-2010-10286
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for moodle FEDORA-2010-10321
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
Fedora Update for moodle FEDORA-2010-10291
The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2009-2230
SQL injection vulnerability in inc/datahandlers/user.php in MyBB aka MyBulletinBoard before 1.4.7 allows remote authenticated users to execute arbitrary SQL commands via the birthdayprivacy parameter...
CVE-2009-2230
CVE-2009-2230 affects MyBB (MyBulletinBoard) prior to 1.4.7. The issue is an SQL injection in inc/datahandlers/user.php via the birthdayprivacy parameter, exploitable by remote authenticated users to run arbitrary SQL commands. The connected documents confirm the vulnerable component and the inje...
CVE-2009-2230
creationtimestamp| type| source ---|---|--- 2009-06-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9001...
CVE-2008-2230
Untrusted search path vulnerability in 1 reportbug 3.8 and 3.31, and 2 reportbug-ng before 0.2008.06.04, allows local users to execute arbitrary code via a malicious module file in the current working directory...
CVE-2008-2230
Untrusted search path vulnerability in (1) reportbug 3.8 and 3.31, and (2) reportbug-ng before 0.2008.06.04, allows local users to execute arbitrary code via a malicious module file in the current working directory. Root cause: untrusted module loading path. Affected components: reportbug and rep...
Debian Security Advisory DSA 1093-1 (xine-ui)
The remote host is missing an update to xine-ui announced via advisory DSA 1093-1. Several format string vulnerabilities have been discovered in xine-ui, the user interface of the xine video player, which may cause a denial of service. The old stable distribution woody is not affected by these...
CVE-2007-2230
SQL injection vulnerability in CA Clever Path Portal allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents via 1 the ofinterest parameter in a light search query, 2 description parameter in the advanced search query, and possibly other vectors...
CVE-2007-2230
CVE-2007-2230 describes a SQL injection vulnerability in the CA Clever Path Portal. The issue allows remote authenticated users to execute limited SQL commands and retrieve arbitrary database contents through multiple vectors, notably the ofinterest parameter in a light search query and the descr...
[SECURITY] [DSA 1093-1] New xine-ui packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 1093-1 [email protected] http://www.debian.org/security/ Martin Schulze June 8th, 2006 http://www.debian.org/security/faq -...
CVE-2006-2230
Multiple format string vulnerabilities in xiTK xitk/main.c in xine 0.99.4 might allow attackers to cause a denial of service via format string specifiers in an MP3 filename specified on the command line. NOTE: this is a different vulnerability than CVE-2006-1905. In addition, if the only attack...
CVE-2006-2230
CVE-2006-2230 affects xine-ui (the xine viewer UI) and is described as multiple format string vulnerabilities in xiTK/main.c of xine 0.99.4 that can cause a denial of service via a filename argument. Public references in Debian and OpenVAS advisories confirm a format-string issue exploitable loca...
CVE-2004-2230
CVE-2004-2230 : Heap-based buffer overflow in isakmpd on OpenBSD 3.4–3.6 allows local users to trigger a denial of service (panic) and memory corruption via IPSEC credentials on a socket. Affected software: OpenBSD’s isakmpd (versions 3.4–3.6). Root cause: heap-based overflow in handling IPSEC cr...
